On Tue, 27 Nov 2007 15:16:56 -0600, McKown, John <[EMAIL PROTECTED]> wrote:
>> -----Original Message----- >> From: IBM Mainframe Discussion List >> [mailto:[EMAIL PROTECTED] On Behalf Of Chase, John >> Sent: Tuesday, November 27, 2007 3:08 PM >> To: [email protected] >> Subject: ICSF First-time Startup >> >> >> Hi, All, >> >> We got the CPACF activated on our z9s this past weekend, and >> now I'm "in >> the midst" of "initializing" ICSF. So far, I've completed >> all the steps >> outlined in the ICSF Sysprog Guide and have the started task running. >> SYSLOG messages are correct for first-time startup in our >> configuration >> with empty CKDS and PKDS, and the related ISPF panels are accessible. >> >> S CSF >> >> $HASP100 CSF ON STCINRDR >> >> IEF695I START CSF WITH JOBNAME CSF IS ASSIGNED TO >> USER STCCSF >> , GROUP STC >> >> $HASP373 CSF STARTED >> >> IEF403I CSF - STARTED - TIME=14.01.05 >> >> CSFM101E PKA KEY DATA SET, SYS1.CSF.CSFPKDS IS NOT >> INITIALIZED. >> CSFM506I CRYPTOGRAPHY - THERE IS NO ACCESS TO ANY >> CRYPTOGRAPHIC >> COPROCESSORS OR ACCELERATORS. >> >> CSFM001I ICSF INITIALIZATION COMPLETE >> >> CSFM400I CRYPTOGRAPHY - SERVICES ARE NOW AVAILABLE. >> >> >> Next step, according to the ICSF Admin Guide, is to >> initialize the CKDS >> with a master key. The manual says to invoke the PPINIT utility for >> this, but instead of the "next panel" shown in the manual, I >> get "OPTION >> NOT ACTIVE" in the message area. I've retraced all the steps >> I took to >> get to "here", and cannot see that I missed any. >> >> Any ideas how to proceed from "here"? Running z/OS 1.7, BTW. >> >> TIA, >> >> -jc- > >I've been stuck at that same point too. Hopefully there is somebody who >can tell us both how to continue. > John / John, Do either of you have any Crypto hardware? Although CPACF must be enabled, it is an assist processor physically embedded on each Central Processor (CP) (free). No master keys are needed to use the (clear key) CPACF assists. The last redbook I have that may be of some help to explain this stuff is "z9-109 Crypto and TKE V5 Update" SG24-7123-00 (Dec. 2005). There may be something more current... Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:[EMAIL PROTECTED] z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
